Product by IBM

    Sterling Connect:direct

    10 known vulnerabilities in Sterling Connect:direct (IBM), 0 of them actively exploited (CISA KEV).

    Key figures

    10

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Sterling Connect:direct (IBM)
    HighCVE-2024-6345

    Remote Code Execution in pypa/setuptools

    also in 8 other products

    		8.8
    HighCVE-2025-59375

    libexpat Project libexpat: Allocation of Resources Without Limits or Throttling

    also in 23 other products

    		7.5
    MediumCVE-2025-48924

    Apache Commons Lang: Uncontrolled Recursion

    also in 28 other products

    		5.3
    CriticalCVE-2025-41232

    Spring Security: security vulnerability

    also in 3 other products

    		9.1
    HighCVE-2026-105453

    IBM Sterling Connect:Direct for Unix Improper Privilege Management

    also in 1 other product

    		8.4
    HighCVE-2025-1948

    Eclipse Jetty HTTP clients can increase memory allocation

    also in 9 other products

    		7.5
    HighCVE-2024-12397

    Io.quarkus.http/quarkus-http-core: quarkus http cookie smuggling

    also in 20 other products

    		7.4
    HighCVE-2026-93888

    IBM Sterling Connect:Direct for Unix Buffer Overflow

    also in 1 other product

    		7.8
    MediumCVE-2024-47535

    Denial of Service attack on windows app using Netty

    also in 12 other products

    		5.5
    HighCVE-2024-13009

    Eclipse Jetty GZIP buffer release

    also in 11 other products

    		7.2

    All products by IBM